Back to Database
Status published
Medium
CVE-2022-24633
All versions of FileCloud prior to 21.3 are vulnerable to...
Vulnerability Description
All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/<username>". A malicious actor could identify the existence of users by requesting share information on specified share paths.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-24633
Credits & Attribution
No credits recorded in the NVD database.
More from filecloud
View All →CVE-2022-39833
FileCloud Versions 20.2 and later allows remote attackers to potentially...
Unknown
0
CVE-2022-25242
In FileCloud before 21.3, file upload is not protected against...
High
8.8
CVE-2022-25241
In FileCloud before 21.3, the CSV user import functionality is...
High
8.8
CVE-2020-26524
CodeLathe FileCloud before 20.2.0.11915 allows username enumeration....
Medium
5.3
Affected Vendor
filecloud
View all reports →Affected Software
filecloud
Vulnerable Versions:
0
Timeline
Official Publish:
February 22nd, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.